Threats affecting pkg:github/mgeurts/genealogy

A critical broken access control vulnerability (CWE-862) exists in MGeurts genealogy versions prior to 5.9.1. This flaw allows any authenticated user to transfer ownership of arbitrary non-personal teams to themselves, resulting in complete takeover of other users' team workspaces and full access to all associated genealogy data. The vulnerability is fixed in version 5.9.1. No known exploits are reported in the wild as of the publication date.